Your first tenant

Once your MSP account is approved and GDAP is set up, here's the 10-minute walkthrough to onboard your first customer and prove the platform end to end.

1. Send the GDAP invite

GDAP setup covers this. Pick the full 8-group role template for your first tenant so every module works out of the box; trim back later if the customer needs a tighter scope.

2. First sync

As soon as the customer Global Admin accepts, the tenant appears in the portal. The first sync is automatic and runs through these surfaces in parallel:

  • Licence inventory (who's on what SKU)
  • User list + sign-in activity (via AuditLog.Read.All)
  • Conditional Access policies snapshot
  • Microsoft Secure Score
  • Defender incidents + risky sign-ins

Watch the tenant detail page — counters go live as each surface reports in.

3. Run a baseline compliance scan

Open the tenant's Compliance tab, clickScan Essential Eight. First scan takes 15–30 seconds. You'll get:

  • Maturity Level score (0–3) per strategy
  • Specific findings the customer can address
  • Remediation steps with exact Graph / admin-centre paths
  • An evidence blob kept for the audit trail

4. Apply a standard

Manage365 ships ~20 built-in standards. For a quick win, applyBlock legacy authentication and Require MFA for admins. Open Standards, pick the standard, select the tenant, click Apply. Target: under 60 seconds, visible via a live WebSocket progress feed.

5. Check DNS health

Every tenant you onboard should pass SPF / DMARC / DKIM / DNSSEC at minimum. Open the tenant's DNS healthtab — the platform checks the tenant's default domain against the M365 default DKIM selectors and gives you copy-paste DNS records for any gaps.

6. Wire the PSA integration (optional but recommended)

In Settings → Integrations connect HaloPSA (or ConnectWise Manage). After that, alerts raised against this tenant can auto-open tickets, and Manage365 actions can log time entries for billing. See HaloPSA integration.

7. Wallboard the portfolio

Open Wallboard on a spare screen in your NOC. Pick the NOC overview template — it auto-refreshes every 30 seconds and shows portfolio health, active incidents, open critical alerts, compliance score average. One tenant in, you already have a working wallboard.

What to try next